Cannot select ldap user profile for SGD Global Admin

Hi all,
I'm trying to select some ldap users to be in the SGD Global Administrators role, but I am unable to check the check box next to the user profile once I navigate to the account. There is no check box to check.
I am actively using LDAP for regular user auth and application assignment, so I know my LDAP "works" in that sense, I just can't use it to assign global admins.
Any thoughts?
Adam

The only way to do this is to create a user profile for the (would-be) admin account. And since they're an LDAP user, you'll have to use LDAP mirroring to do this. For example, let's say the user you want is "cn=Joe Admin, ou=Users, dc=example, dc=com"
Go to "User Profiles", and browse to/open:
dc=com
cd=example
create the directory object "ou=Users"
Inside of "ou=Users", create the user profile object "cn=Joe Admin"
Add this user object to the Global Administrators role.
http://docs.sun.com/source/820-4907/chapter3.html#d0e13589

Similar Messages

How to select the printer and select the ICC profile for printing with VBScript?

I try to automate my printing procedure in photoshop. The problem is that I don't know how to select the printer and select the icc profile for printing with vbscript like I manually do in the print-menu in photoshop?
Anyone has done this before?
Thanx!
jus

Client/Server version:
- D2KWUTIL.PLL library provides a 'Select Printer' dialog box to be used in Forms: WIN_API_DIALOG.SELECT_PRINTER
http://guenter-huerkamp.dyndns.org/oracle-doc/docs/html/d2kwutil.html
I suggest you to create a form to invoke the report, allowing user to select the printer and then pass it as parameter DESNAME

Error:(in tcodeVA02)"You cannot select assembly order 16600192 for deletion

when i am trying to delete one line item from sales order using VA02 tcode its throwing error "You cannot select assembly order 16600192 for deletion".
could you tell me please what might be the reason and how to resolve this issue.
waiting for your response.
thanks,
aritra
Message was edited by: Aritra Samanta
Message was edited by: Aritra Samanta

Let me ask you this: Is the assembly order 16600192 your VA02 order number? If not, your sales order item might have created an assembly order (with this number). Depending on its status, you may not be able to delete the assembly order and therefore the sales order item deletion is not possible.
Verify the assembly order status.
Good luck!

I'm using iTunes 9 and I recently just bought AirPort Express. I have used it before in the past put the problem I have now is that I cannot select the Express network for my speakers. Does Airport Express only work with iTunes 10 or 11?

I'm using iTunes 9 and I recently just bought AirPort Express. I have used it before in the past put the problem I have now is that I cannot select the Express network for my speakers. Does Airport Express only work with iTunes 10 or 11?

Hello Hornet12,
Indeed, iTunes 10.2 or later will be required to utilize AirPlay.
Using AirPlay
http://support.apple.com/kb/HT4437
AirPlay requirements and capabilities
To get full AirPlay features, make sure your AirPlay-enabled devices are running the latest software updates. The table below identifies minimum AirPlay requirements and capabilities:
Stream content from
Requirement
Notes
iPad
iOS 4.3 or later.1
From the Videos, iPod, Photos, Music, and YouTube apps on iOS devices, stream videos, music, and photos to an Apple TV (2nd and 3rd generation), or stream music to an AirPort Express or compatible third-party device.
With iOS 4.3 and later, you can also stream video and audio from a website or a third-party app installed on your iOS device if the developer for the app or website has added AirPlay functionality.
iPhone (3GS or later)
iPod touch
(2nd generation or later)
Computer
iTunes 10.2 or later.
Stream videos and music from your iTunes library to an Apple TV (2nd and 3rd generation), or music to an AirPort Express or compatible third-party device.
Apple TV
Apple TV software version 5.1 or later.
Stream music from your Apple TV to another Apple TV (2nd and 3rd generation), to an AirPort Express or compatible third-party device.
Cheers,
Allen

How to fix Workflow failed to get user profile for user:

hi All,
How to fix Workflow failed to get user profile for user when using Lookup function in sharepoint designer?

Try to use “As string” instead of “Login Name” for the “Return field as”.
Regards,
Jayant
jayant prabhakar

I have setup a new user profile for myself on my wife's mac. If i authorise it for my content will it remove my wife's authorisation.

I have set up a separate user profile for myself on my wife's MacBook Air.
If i authorise this Mac for my content for home sharing, will this remove my wife's authorisation.

Shared iMac, different users, different iTunes accounts - 90 day hold???

Create unique user profiles for each separate session

Hi,
How can I configure TS environment so that each user (who logs onto Windows using the same generic Windows user ID) gets their own unique Windows user profile.
For example, imagine a scenario where the users are logging onto Windows using the shared user "SYSTEMAPP"
The intention is to configure the TS server's Windows, so that it creates unique user profiles for each separate session, for example:
- SYSTEMAPP
- SYSTEMAPP.000
- SYSTEMAPP.001
- SYSTEMAPP.002 (etc...)
The server version for TS is Windows Server 2012 and not joined to AD. User IDs are created at Local Users and Groups.
Kindly advise.

Hi Susie,
Just to illustrate my point further. Let's say a user logged into the server using user ID SYSTEMAPP for the first session. So, if
you browse the folders in the server, you'll be able to see this:
C:\Users\SYSTEMAPP
Then, another user logged into the same server as SYSTEMAPP user using other session. In this case, my intention is to configure the
server to create another unique user profile as below:
C:\Users\SYSTEMAPP.000
Subsequently, if more users logged in using the same account, the unique counter number will keep on adding...
C:\Users\SYSTEMAPP.001
C:\Users\SYSTEMAPP.002
C:\Users\SYSTEMAPP.003
Previously, I checked from my third party software vendor that this can be done but I still cracking my head on this which is why led me
to this forum.
Kindly advise.

Cannot select Preserve Users and Network Settings

I am trying to do an Archive and Install but want to save my user settings but I cannot select "Preserve Users and Network Settings" as it is grayed out and unelectable. The question is, why?

Have a read of this.
http://discussions.apple.com/thread.jspa?threadID=1858697&tstart=1

Worflow failed to get user profile for user

I have a workflow that sends an email to a user. In the workflow email, one line has the lookup [%User Profiles:Name%], with Return field "As String" of the list item Field "Account Name" with Value "Current Item:Created By".
This workflow works for everyone, except it Errors when one user creats an item in this list. The error is "Workflow failed to get user profile for user... System Account - An error has occurred in Workflow Name"
and more detailed error found in logs: "AutoStart Workflow: Microsoft.SharePoint.SPException: Recursive workflows are not permitted.     at Microsoft.SharePoint.Workflow.SPWorkflowAutostartEventReceiver.<>c__DisplayClass1.<AutoStartWorkflow>b__0(SPSite
superUserSite, SPWeb superUserWeb)
System.InvalidOperationException: Workflow failed to get user profile for user:domainName\username.     at Microsoft.Office.Workflow.Actions.UserProfileHelper.GetProfile(String propertyName, String user)     at Microsoft.Office.Workflow.Actions.ProfileHelperBase.GetProfileString(String
propertyName, String userOrOrganization)     at Microsoft.Office.Workflow.Actions.GetUserProfileActivity.Execute(ActivityExecutionContext context)     at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
ActivityExecutionContext executionContext)     at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext)     at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime
workflowCoreRuntime)     at System.Workflow.Runtime.Scheduler.Run() "
When I run "get-addomain -identity [FQDN]", I noticed that our DNSRoot has a totally different name than our NetBIOSName, so I followed this article and made sure to set netbiosdomainnamesenabled to TRUE:
http://meandmysharepoint.blogspot.ca/2012/09/netbiosdomainnamesenabled-and.html
To give you an idea of our setup, our DNSRoot is "abc.domain.com" and our NetBIOSName is "TESTING"; 2 totally different names. When I run "get-addomain -identity [FQDN]", the Name field is: "abc" (just the first
part of the DNSRoot); therefore, when I look up this user's profile in Sharepoint Manage User Profiles, his account shows as "abc\username" when it should be "TESTING\username".
I did an IISReset, and I ran a Full Profile Sync. But the workflow still Errors for this user.
Any ideas how to fix this? Should I delete MySites and User Profile Service application and recreate them?
Any tips would be appreciated.
thanks!

Hi,
According to your description, my understanding is that the error occurred when sending an email to the user in workflow.
Did you delete the existing Connections before setting NetBiosDomainNamesEnabled?
If not, I recommend to delete and recreate your AD connections, then set NetBiosDomainNamesEnabled to true.
Or you can delete the original User Profile Service Application and create a new one, then set the NetBiosDomainNamesEnabled to true and start the User Profile Service Application
synchronization.
More reference:
http://social.technet.microsoft.com/wiki/contents/articles/18060.sharepoint-20xx-what-if-the-domain-netbios-name-is-different-than-the-fqdn-of-the-domain-with-user-profile.aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Cannot select between express profiles?????

I have two scenarios for two locations in which I use my airport express to connect to remote speakers for iTunes
1. HOME - Join an existing wireless network at my home.
2. WORKSHOP - Create a wireless network at my workshop.
For each of the above scenarios, I have set up a profile with the Airport Utility.
If I have it set to Home, it works perfectly at home. But, when I take it to my workshop, the airport cannot be found even though I have a "workshop" profile. If I cannot find the express, then I can't change the profile over to workshop.
I know that the workshop profile works because I have reset the the express at my workshop and set it up to create a wireless network, and when I take this home, I just select the airport's wireless network that it is creating and make a new profile for home in which it joins an existing wireless network.
By alternating daily between the two locations, I have to reset the airport every time I want to use it at my workshop. I suppose I could change the profile at home to workshop before I leave, but I'm hoping someone has a better solution. Thank you.

It would be nice though if the airport would ask you which profile you want if it doesn't recognize it's environment. At least to be able to change it anytime without resetting would be a little more user friendly.
I wholeheartedly agree on both counts ...
Maybe apple could update the software to help this???
You might want to provide this suggestion directly to Apple? Here's the link:
Product Feedback

OIM 11g Modify User Profile for Updating End Date

Hi Gurus!
We have an OIM implementation where users may request the creation of other users by means of a Create User request template. In this template we set the End Date to be 3 months after the request date.
In order for the requester to extend the period of a user's OIM user account (along with its provisioned resources) we customized a Modify User Profile by displaying the End Date field and automatically populate it again to 3 months after the request date. Also we developed a custom event handler to enable the user when it is disabled and the End Date is updated to a future date.
This Modify User Profile is working great when the user is still enabled (the End Date is still in the future), however, when the End Date has passed (and the user is Disabled) the requester is not able to see the user when selecting the Modify User Profile request template.
Is there a way to allow requesters to also see disabled users in the Modify User Profile request template?
Thank you in advance.
Regards,

Hi Kevin,
thanks for your reply!
But, in this case, when the user is already disabled due to his End Date, how can a requester, through the Self Service TAB, enable it?
The Enable User request template does not work since when trying to enable the user, OIM sees the End Date is already passed and the DataSet validation throws an exception.
The only way I saw was providing a Modify User Profile Request template to change the End Date and developing a custom event handler to enable the user upon the extension of the End Date...
How can, in this situation, a requester enable the user and extend its End Date?
Thank you!
Regards,

Task Privileges for Existing Users - Looking for a global update solution

After some reading I understand that if you set the task privileges for the PUBLIC user in the Privileges section of Discoverer Administrator (10g), any new user created in the system will pick up the privileges you have assigned to the PUBLIC user.
I currently have 4000+ users who have access to Discoverer Plus and the ability to create/edit queries. I want to limit who can access Discoverer Plus functionality to approximately 150 users.
I have changed my PUBLIC user to NOT have privileges but this will only affect new users. Is there any way to restrict 4000+ users without having to go through each user individually and set the privileges.
I am looking for a global update solution. I am wondering if this can be done through the back-end.

Hi Mezzobella
If you change the rights for the public user then other users, who have not been manually adjusted in any way, will automatically pick up the public rights. Therefore, if you have a lot of users that are not changing this means that at some point in their life you will have clicked OK or Apply on the screen with a user displayed. This now assigns the rights to that user as opposed to inheriting them from the public user.
What you are describing is the perfect reason why you should not administer Discoverer using user accounts but to use roles or responsibilities instead.
In your case you are now somewhat stuck. The programatic way to revoke these rights is to drop rows from the EUL5_ACCESS_PRIVS table but this could take longer than doing inside Discoverer. Basically, when a user has been granted privileges one row per privilege is inserted into this table. The column AP_EU_ID contains the ID of the user. The column GP_APP_ID is the one that tells you what privilege a user has. Here is a list of the privileges:
1000 Desktop / Plus Privilege (U)
1001 Create / Edit Query (U)
1002 Item Drill (U)
1003 Drill Out (U)
1004 Grant Workbook (aka Sharing) (U)
1005 Collect Query Statistics (U)
1006 Admin Privilege (A)
1007 Set Privilege (A)
1008 Create / Edit Business Area (A)
1009 Format Business Area (A)
1010 Create / Edit Summaries (A)
1011 Not used as far as can be determined
1012 Schedule (U)
1013 User is never required to schedule workbooks (U)
1014 Save workbooks to database (U)
1015 Managed scheduled workbooks (A)
1016 This is an apps mode EUL
1017 This is the user's assigned language
1018 User is allowed to change password
1019 to 1023 Not used as far as can be determined
1024 Create Link (U)
Note: A = Admin privilege, U = User privilege
Theoretically you could manually delete rows from this table and that will revoke the rights. In reality, Oracle do not like it when inexperienced users manually the EUL as you could corrupt it. Therefore, any manual updates must be done with utmost caution after making sure you back up or have a copy of the table you will be updating - just in case.
Try running this query to see the content:
SELECT DECODE( AP_EU_ID, 104198, 'Viewer', 103697, 'Plus', 'Other' ) "Who" , AP_ID, AP_TYPE, AP_EU_ID, AP_PRIV_LEVEL, GP_APP_ID, GBA_BA_ID, GD_DOC_ID, AP_ELEMENT_STATE
FROM EUL5_ACCESS_PRIVS
Best wishes
Michael

LDAP user profile entries

Hello,
I am trying to setup Sun Java 2005Q4 Directory server and Messaging server to work interoperable replacing NIS and sendmail.
The question is what entries should be in user ldif profile to provide nis and mail capabilities at the same time?
What else (schema, cli, etc) should be done to provide these capabilities?
Again, the main thing is to provide naming and mail entries in one user profile.
Currently I have the following user entries:
dn: uid=testuser,ou=People,o=domain.com,o=ldap
cn: testuser
uidNumber: 1177
gidNumber: 2000
gecos: Test User
homeDirectory: /home/testuser
loginShell: /usr/bin/tcsh
objectClass: posixAccount
objectClass: shadowAccount
objectClass: account
objectClass: top
uid: testuser
shadowLastChange: 12926
shadowFlag: 0
userPassword: [crypt} BnBnBNBn
Any help will be greatly appreciated and summarized.

The short and proper way of doing this is to prepare the instance of the directory with the individual scripts for each product. These scripts not only add the required schema but also indexes and other changes. For messaging the script is "comm_dssetup.pl" and for LDAP as naming services it is "idsconfig". Since they are independant of each other you can execute them in any order but you must follow the documentation on how to execute these and what pre-requisites to fulfill.
Regards,
-Wajih

LDAP user profile messaging entries

Hello,
I am trying to setup Sun Java 2005Q4 Directory server and Messaging server to work interoperable replacing NIS and sendmail.
The question is what entries should be in user ldif profile to provide nis and mail capabilities at the same time?
What else (schema, cli, etc) should be done to provide these capabilities?
Again, the main thing is to provide naming and mail entries in one user profile.
Currently I have the following user entries:
dn: uid=testuser,ou=People,o=domain.com,o=ldap
cn: testuser
uidNumber: 1177
gidNumber: 2000
gecos: Test User
homeDirectory: /home/testuser
loginShell: /usr/bin/tcsh
objectClass: posixAccount
objectClass: shadowAccount
objectClass: account
objectClass: top
uid: testuser
shadowLastChange: 12926
shadowFlag: 0
userPassword: [crypt} BnBnBNBn
Any help will be greatly appreciated and summarized.

Roger,
Thank you for your response.
This is a nice manual, but it does not solve the problem. I am actually did set up DS for naming service, and it is working well.
But, if I am installing messaging server in addition to DS it creates problem.
I think it modifies the schema, which is not supporting naming objects as posixAccount, etc. If I try to add them to the mail accounts created by Delegated Admin, I've got an object class violation error.
Thank you,

Sharepoint 2013 ADFS Integration duplicates User Profiles for each Authentication Type

Hello everyone
i am building up a sharepoint farm which is hosting some of our corporate web sites. before integration Adfs and using SAML-Based Authentication every user had a single User Profile and were happy.
when i integrated adfs 3.0 and sharepoint 2013 SP1 i found whoun a user logs into sharepoint by using trusted identity token issuer (adfs 3.0) they get redirected to a new profile which is totally different from their old Profile. what is the problem ?

The problem is that SharePoint does not support Multilogon accounts. I asked for that here -
http://sharepoint.uservoice.com/forums/282887-customer-feedback-for-sharepoint-server/suggestions/7085002-multilogon-accounts
If you're just moving to ADFS only, then you can migrate users with Convert-SPWebApplication -
https://technet.microsoft.com/en-us/library/jj219696(v=office.15).aspx or with a script provided here:
http://blogs.msdn.com/b/sambetts/archive/2014/09/03/how-to-migrate-sharepoint-users-to-adfs.aspx (uses Move-SPUser).

Cannot select ldap user profile for SGD Global Admin

Similar Messages

Maybe you are looking for